Lucene search
+L

975 matches found

GithubExploit
GithubExploit
added 2026/05/01 7:06 p.m.145 views

Exploit for Missing Authentication for Critical Function in Cpanel

cve-2026-41940-exploit Cpanel Au...

9.8CVSS5.8AI score0.98527EPSS
SaveExploits74
GithubExploit
GithubExploit
added 2026/05/01 4:27 p.m.173 views

Exploit for Missing Authentication for Critical Function in Cpanel

poc...

9.8CVSS5.8AI score0.98527EPSS
SaveExploits74
GithubExploit
GithubExploit
added 2026/05/01 3:43 p.m.112 views

Exploit for Missing Authentication for Critical Function in Cpanel

markdown CVE-2026-41940 - WHM/cPanel Authentication Bypass...

9.8CVSS5.8AI score0.98527EPSS
SaveExploits74
GithubExploit
GithubExploit
added 2026/05/01 11:27 a.m.101 views

Exploit for Missing Authentication for Critical Function in Cpanel

No d...

9.8CVSS6AI score0.98527EPSS
SaveExploits74
GithubExploit
GithubExploit
added 2026/05/01 1:34 a.m.118 views

Exploit for Missing Authentication for Critical Function in Cpanel

CVE-2026-41940 A security research tool for detecting and anal...

9.8CVSS5.8AI score0.98527EPSS
SaveExploits74
Snyk
Snyk
added 2026/04/28 10:46 p.m.8 views

Missing Authentication for Critical Function

Overview github.com/coredns/coredns/core/dnsserver is a package that implements all the interfaces from Caddy, so that CoreDNS can be a servertype plugin. Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the tsig plugin on non-plain-DNS...

8.7CVSS5.8AI score0.00374EPSS
SaveExploits1References2
Snyk
Snyk
added 2026/04/27 2:16 p.m.7 views

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the TlsTransportPlugin. An attacker can gain unauthorized access by establishing a TLS connection without presenting a valid client certificate, as the system assigns an anonymous princip...

8.2CVSS5.8AI score0.00286EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/04/24 4:32 p.m.10 views

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function in the ServeHTTP function, which does not sufficiently sanitize X- alias headers. An attacker can gain unauthenticated access to protected endpoints by injecting spoofed trust context with...

10CVSS5.5AI score0.00479EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2026/04/23 8:10 p.m.46 views

CVE-2026-6376 Missing authentication for critical function in SpiceJet Online Booking System

A weakness in SpiceJet’s public booking retrieval page permits full passenger booking details to be accessed using only a PNR and last name, with no authentication or verification mechanisms. This results in exposure of extensive personal, travel, and booking metadata to any unauthenticated user...

8.7CVSS0.00497EPSS
SaveExploits0References1
Snyk
Snyk
added 2026/04/23 3:07 p.m.7 views

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function in the options/set endpoint. An attacker can set rc.NoAuth=true and override default AuthRequired: true which can lead to unauthorized access to sensitive administrative functionality,...

9.8CVSS5.7AI score0.32715EPSS
SaveExploits1References2
Snyk
Snyk
added 2026/04/22 5:06 p.m.7 views

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the SFTP authentication process when the server is configured with an empty username and a password using the -b ':pass' flag together with -sftp. An attacker can gain unauthorized access...

9.8CVSS5.6AI score0.00478EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2026/04/20 3:51 p.m.9 views

CVE-2026-26944

Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.60 contain a missing authentication for critical function vulnerability. An unauthenticated attacker with remote access could potentially...

8.8CVSS6.1AI score0.0054EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/04/20 6:31 a.m.11 views

EUVD-2026-23755

SD-330AC and AMC Manager provided by silex technology, Inc. contain a missing authentication for critical function issue. The device configuration may be altered without authentication...

6.9CVSS5.7AI score0.00274EPSS
SaveExploits0References4
NVD
NVD
added 2026/04/20 4:16 a.m.9 views

CVE-2026-32962

SD-330AC and AMC Manager provided by silex technology, Inc. contain a missing authentication for critical function issue. The device configuration may be altered without authentication...

6.9CVSS0.00274EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/04/20 3:18 a.m.6 views

CVE-2026-32962

SD-330AC and AMC Manager provided by silex technology, Inc. contain a missing authentication for critical function issue. The device configuration may be altered without authentication...

6.9CVSS5.7AI score0.00274EPSS
SaveExploits0References4Affected Software2
Cvelist
Cvelist
added 2026/04/20 3:18 a.m.42 views

CVE-2026-32962

SD-330AC and AMC Manager provided by silex technology, Inc. contain a missing authentication for critical function issue. The device configuration may be altered without authentication...

6.9CVSS0.00274EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/04/20 12:00 a.m.10 views

PT-2026-33700

SD-330AC and AMC Manager provided by silex technology, Inc. contain a missing authentication for critical function issue. The device configuration may be altered without authentication...

6.9CVSS5.7AI score0.00274EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/04/20 12:00 a.m.14 views

PT-2026-33791

Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.60 contain a missing authentication for critical function vulnerability. An unauthenticated attacker with remote access could potentially...

8.8CVSS6.1AI score0.0054EPSS
SaveExploits0References5
GithubExploit
GithubExploit
added 2026/04/18 11:48 a.m.204 views

Exploit for Missing Authentication for Critical Function in Nginxui Nginx_Ui

CVE-2026-33032 / MCPwn !CVEhttps://img.shields.io/badge/C...

9.8CVSS7.3AI score0.36299EPSS
SaveExploits16
Snyk
Snyk
added 2026/04/17 8:08 p.m.14 views

Missing Authentication for Critical Function

Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the sandbox noVNC helper route. An attacker can gain unauthorized access to interactive browser session credentials by bypassing bridge...

9.8CVSS5.7AI score0.00401EPSS
SaveExploits0References2
Rows per page
Query Builder